Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215731.roa
File: AS215731.roa (raw, json)
Hash identifier: L/NKS/PMhfVHA5TwamENOEr2jpaGq2wU6XI1/JDXqeE=
Subject key identifier: E7:02:AC:54:C9:7D:00:BD:60:10:9F:E3:3E:9A:51:B3:7E:D3:C6:EE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1D757E4308FD70CB338CEF02873FD33757659BDA
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215731.roa
Signing time: Fri 26 Jun 2026 08:08:46 +0000
ROA not before: Fri 26 Jun 2026 08:03:46 +0000
ROA not after: Fri 25 Jun 2027 08:08:46 +0000
asID: 215731
IP address blocks: 2a0f:85c1:349::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:75:7e:43:08:fd:70:cb:33:8c:ef:02:87:3f:d3:37:57:65:9b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:46 2026 GMT
Not After : Jun 25 08:08:46 2027 GMT
Subject: CN=E702AC54C97D00BD60109FE33E9A51B37ED3C6EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:cc:3f:fe:df:92:f8:21:8c:09:91:47:00:
92:01:37:cf:70:d2:c6:82:42:af:5a:65:44:f3:e0:
d0:da:17:3d:ee:e5:70:26:65:8a:2c:12:7a:54:4f:
4c:a6:70:af:23:3c:d4:b2:30:4b:2d:8d:ff:7d:dd:
9b:6a:3e:2a:d5:ba:e3:e2:30:a5:31:2d:86:f8:97:
56:72:34:a9:0b:f4:45:7e:c7:f4:1a:08:f2:97:b4:
6f:fd:93:77:2d:06:48:6f:20:80:c7:98:94:62:b4:
32:96:97:ba:c1:3b:8f:fa:52:fa:d2:56:f1:ec:7d:
85:bf:ab:7b:e3:00:e2:27:38:b6:70:d3:8c:e7:38:
95:eb:b3:2c:f4:80:f1:7c:64:5b:c1:d4:dd:ce:07:
61:7f:4f:ac:ab:43:65:76:d0:ab:7a:d1:60:96:11:
86:48:3c:3c:15:65:37:e6:c6:cc:ad:5a:93:31:f8:
0a:77:ef:8e:c5:51:c5:66:33:95:5b:e3:e3:ad:97:
d9:df:fd:c5:8c:f6:f1:3a:de:f7:fe:13:a9:7d:5c:
08:bf:97:63:87:84:cd:3c:83:40:7d:05:d2:08:4c:
be:93:3e:82:bd:43:ce:ce:f0:45:18:da:b4:7e:a0:
7f:8f:49:fe:79:91:58:b4:e2:f8:ae:6b:b2:34:05:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:02:AC:54:C9:7D:00:BD:60:10:9F:E3:3E:9A:51:B3:7E:D3:C6:EE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:349::/48
Signature Algorithm: sha256WithRSAEncryption
30:b1:f6:46:74:63:1f:22:2d:37:5d:bf:ee:55:8b:68:a9:48:
07:18:1a:7d:9e:14:ab:38:c4:ff:2d:62:53:f1:a7:8b:16:06:
7e:b1:b8:b2:2e:19:99:d8:3a:4d:a4:2c:0d:09:56:1c:8e:8f:
02:fa:36:20:5f:48:9b:c6:12:64:41:cb:92:bf:1b:c3:64:57:
1e:fa:cf:13:21:4b:6f:a8:2b:2b:e1:21:a1:41:02:bc:9d:7a:
e7:33:63:9f:64:67:b4:bf:75:7d:69:45:64:aa:5f:7d:e0:2b:
bc:84:8f:cf:0e:7a:81:f8:32:3a:bc:55:4e:a4:fe:10:46:8a:
14:76:4a:3b:71:a4:3c:a7:e5:24:ce:14:81:a2:ed:8e:04:40:
c3:51:6a:bc:30:ac:cb:6c:46:26:ff:02:ff:99:42:f3:f9:15:
3d:61:56:88:c5:ba:09:59:41:b2:66:3e:66:43:e2:c2:40:a4:
d6:09:10:68:e4:a3:26:4e:7f:41:f8:9d:90:94:3f:bb:fe:30:
f5:25:23:b9:09:ee:4b:41:95:ef:cc:fc:d2:21:96:be:ff:ae:
c4:67:12:f5:a2:90:01:a4:4c:c7:c7:76:cf:16:20:b8:85:b6:
c4:e4:8d:da:4e:c6:f8:ca:f8:6a:f2:1a:17:8c:c4:ab:e9:21:
94:4a:da:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:02 2026 by rpki-client